Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: arOTYmoKmgOmY/RI6ddKYPgYQWNp5w2rc8QL81CrqkE=
Subject key identifier: 4F:3F:4C:ED:DA:D7:7B:5B:D8:B6:12:28:3D:43:59:47:CD:C3:58:58
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 0194BCE0A22EF4DB693E84E482BE557A1AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: uEbjIgUOG5a1H2XGV5WNRCzVpJfJNq9U5teKQDwobYc=)
2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a2:2e:f4:db:69:3e:84:e4:82:be:55:7a:1a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=4f3f4ceddad77b5bd8b612283d435947cdc35858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:fd:34:d9:39:64:11:45:47:ed:0a:c8:d0:
a5:86:e6:77:b8:99:59:60:e0:05:09:08:68:81:6c:
ef:13:81:e4:2b:ff:f8:38:a4:b1:60:30:f7:a7:af:
62:2c:9d:c5:ab:37:5a:85:a7:b1:7f:51:f4:57:c5:
7a:dc:6f:76:1c:2d:71:21:68:18:69:77:12:52:b1:
b6:62:f7:e0:b1:35:46:6f:50:7f:4b:b6:e0:bf:ea:
31:63:76:9e:b9:9e:12:d5:d8:76:e8:11:4d:90:de:
b0:6b:21:14:1e:c7:5d:30:05:0f:4a:21:56:68:ff:
2e:12:e3:0e:bd:d8:bd:87:3d:4f:d8:8f:ab:a6:7a:
65:6c:84:03:2c:14:b5:9b:5a:8a:cf:b9:0d:85:13:
d2:f5:ae:f9:bb:64:49:13:f7:49:df:0d:c7:26:de:
c6:78:b5:ce:c4:cf:68:81:6a:20:01:e0:0e:55:68:
44:cf:46:12:72:6d:9c:f5:0c:ae:c3:67:1d:eb:ad:
7f:6c:63:c7:64:31:0f:d6:8f:8b:fd:c3:81:02:63:
21:cf:8c:d5:e3:63:34:50:12:35:43:eb:70:5e:01:
02:c2:54:61:cc:70:fa:26:b8:b7:54:ce:c2:6d:76:
21:24:87:45:dc:e2:6b:e7:d3:27:62:17:83:a3:8f:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3F:4C:ED:DA:D7:7B:5B:D8:B6:12:28:3D:43:59:47:CD:C3:58:58
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e8:3f:ad:9a:b3:b3:0c:3d:7b:12:2a:08:f2:9d:df:a3:07:
58:62:ad:1f:ef:27:28:c6:e5:c5:8b:b9:27:a3:0d:fc:a4:fd:
d8:a7:cf:f2:6c:54:34:3d:f7:e8:3a:0c:45:6d:a6:c5:00:3c:
1b:66:db:8b:3a:89:5a:bf:ad:35:ee:db:49:a2:6b:80:24:da:
80:f3:1d:ec:6b:dd:68:9a:7c:31:62:f5:1a:91:b7:b2:ee:6c:
ba:c7:1f:72:f5:73:0b:c5:85:97:e4:67:84:d0:e0:05:a6:8e:
3f:a1:ce:da:ee:93:b2:63:b7:1f:5b:cd:05:8d:b4:32:ae:db:
d2:a9:5f:58:54:4a:0a:51:f8:62:19:b3:36:36:82:45:d3:6e:
b9:cd:77:a3:62:d5:1d:dd:9f:c1:b0:52:f3:02:00:28:40:89:
a3:e0:b5:83:b8:2d:40:df:e0:64:85:b4:cc:b2:c6:77:fa:7a:
65:10:ac:14:cd:39:42:46:5a:66:af:3d:25:bc:c1:4b:b0:4a:
95:e5:fa:b3:ef:84:c3:aa:67:95:83:7e:a1:53:18:46:3e:1d:
f2:86:58:d8:3c:b3:a7:52:bb:bd:62:47:54:6a:99:6c:fe:5f:
6b:b3:07:b2:d8:7a:56:65:72:e7:c7:0f:ae:25:ef:76:12:eb:
7e:71:b8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:38 2025 by rpki-client